Humhub virus scanner module compatibility

[DanTheMan]

Hi all,

As I'm setting up my Humhub, i came across this module in there marketplace.

https://marketplace.humhub.com/module/virus-scanner/manual

My HumHub install is going to reach a lot of people that are going to use it. So i wanted to take some extra security measures.

Do you think it's possible to have ClamAv installed and working with Humhub on Cloudron?

[girish]

We don't have this feature yet - https://forum.cloudron.io/topic/2090/clamav-installation-that-scans-the-local-storage-for-malware-and-notifies-the-admin

[DanTheMan]

I didn't notice that post before posting this one.
Hopefully sometime (soon) it will be integrated

[DanTheMan]

So in the meantime i came up with this solution:

I have my Cloudron installed at home, in a VM. So what i came up with, is to spin up another Ubuntu 22.04 VM and installed ClamAV deamon on it.
After installing ClamAV on this seperate VM, i made a slight adjustment to the clamd.conf file, so it would listen on it's IP.

From there i humbled back to my Humhub instance and installed the "Virus Scanner" module from there marketplace and adjusted the ip (the seperate VM running ClamAV) in the settings of the module and ClamAV is active now.....

Testing gave me positive results and "eicar test file" was succesfully deleted after detection!!

Humhub notification:

With this working, i think it would also work for other apps like Nextcloud, i guess?

[joseph]

@DanTheMan great idea. But I would double-check if the tcp connection is secure since I think documents will sent across the network. In many VPS, you can create a VLAN/VPC. My understanding is that in these network setups, you don't need to have a secure connection between devices since other customers cannot sniff the traffic.

[DanTheMan]

@joseph Great and thanks for that info

Since i run everything at home, my setup is kinda secure already. But better be safe than sorry...

Actually my Cloudron instance (VM) and Ubuntu ClamAV (VM) both live in a separate Vlan. Totally isolated and separated from the rest of the network(s).